Privacy Policy

What we collect

• Account details: your name and email address, and your Google profile name and email if you sign in with Google. Passwords are handled by our sign-in provider; we never see them.
• What you submit: project names and the website addresses you add.
• Audit results: the public pages Odibi visited, the response details it observed, findings, scores, reports and share links.
• Consent record: when you accepted the Terms and which version.
• Basic technical logs: such as request times and errors, kept to keep the service secure and working.

How we use it

• To run audits, show your reports, and enforce plan limits.
• To keep the service secure and prevent abuse.
• To contact you about your account. We don't sell your information or use it for advertising.

Who processes it for us

• Supabase: sign-in and the database that stores your account and reports.
• Vercel: hosts the website.
• Render: runs the audit service.
• Google: Gemini writes parts of report explanations from the public page content Odibi collected, and PageSpeed Insights measures page performance. Google sign-in is used only if you choose it.

Cookies

Odibi uses only the cookies needed to keep you signed in. We don't use advertising or tracking cookies, so there is no cookie banner.

Share links

A share link lets anyone who has it view one report until it expires or you turn it off. Share pages are marked so search engines don't index them, and they never show your name or email.

How long we keep it and your choices

• We keep your account and reports until you delete them or ask us to delete your account.
• You can delete projects, websites and reports in the app at any time. To get a copy of your data or delete your account, email us and we'll respond within 30 days.
• Depending on where you live, you may have further rights to access, correct or object to processing.

Changes

If we change this policy in a meaningful way, we'll update the effective date and let you know in the app.